通过 Telerik Reporting 安装程序提权

该漏洞的潜在影响非常严重。攻击者可以利用此漏洞在 Telerik Reporting 已经安装的环境中，通过修改安装包来提升自己的权限。这可能导致攻击者获得对服务器的完全控制权，窃取敏感数据，安装恶意软件，甚至破坏系统。 攻击者无需认证即可利用此漏洞，因此风险较高。 类似攻击模式可能导致数据泄露和系统瘫痪。

Organizations using Telerik Reporting in environments where user access controls are not strictly enforced are at higher risk. This includes environments with shared hosting configurations or legacy systems with less stringent security practices. Specifically, systems where users have write access to the Telerik Reporting installation directory are particularly vulnerable.

• windows / dotnet:

Get-Process | Where-Object {$_.ProcessName -like '*TelerikReporting*'}

• windows / dotnet: Check registry for unusual entries related to Telerik Reporting installation paths. • windows / dotnet: Monitor event logs for suspicious processes attempting to modify installation files. • dotnet: Review application configuration files for any unexpected or unauthorized modifications. • generic web: Monitor web server access logs for unusual requests targeting the Telerik Reporting installation directory.

1. 2024-01-31Disclosure

   disclosure

1. 已保留2024-01-23
2. 发布日期2024-01-31
3. 修改日期2024-08-23
4. EPSS 更新日期2026-04-02

最有效的缓解措施是立即升级到 Telerik Reporting 2024 R1 或更高版本。 如果升级不可行，可以考虑以下临时缓解措施：限制对安装程序的访问权限，确保只有授权用户才能修改安装包。 监控系统日志，查找任何可疑的安装活动。 实施严格的访问控制策略，限制用户对敏感数据的访问。 升级后，请验证安装是否成功，并确认漏洞已得到修复。